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Amendments to the Claims 

Please replace the claims as follows: 

Please cancel claims 6, 13, 21, and 28 without prejudice. 

1 . (currently amended) A computer-implemented method for verifying at runtime an 
invariant property of a data structure of a computer program, comprising: 

automatically generating a first code segment that verifies a runtime value of the 
data structure is consistent with the invariant property in response to an annotation of 
the data structure that defines the invariant property of the data structure , wherein the 
invariant property is a range of addresses specified in the annotation in source code of 
the computer program ; 

comparing the runtime value of the data structure with the invariant property 
during execution of the program via execution of the first code segmen t and verifying 
that the runtime value of the data structure is within the range of addresses : and 

performing a programmed action if the runtime value is inconsistent with the 
invariant property. 

2. (currently amended) The method of claim 1 , wherein the range of addresses 
invariant property is a range of data addresses and further comprioing ver i fying that tho 
runt i me va l uo of the data otructuro i o w i th i n a rango of data addrcGooo opocif i ed i n 
Gource code of the computer program . 

3. (currently amended) The method of claim 1 , wherein the range of addresses 
invariant property is a range of data addresses and further comprising: 

automatically generating during compilation a valid data address range including 
an upper bound and a lower bound for the range of data addresses, wherein the source 
code of the computer program does not include a specification of the upper bound and 
lower bound; and 

verifying that the runtime value of the data structure is within the valid data 
address range. 
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4. (currently amended) The method of claim 1 , wherein the range of addresses 
invariant proporty is a range of instruction addresses and further compr i o i ng ver i fy i ng 
that the runt i me va l uo of tho data otructuro i o w i th i n tho rango of i notruct i on addrooooo 
opoc i fiod in oouroe codo of the oomputor program . 

5. (currently amended) The method of claim 1 , wherein the range of addresses 
invariant proporty is a range of instruction addresses and further comprising: 

automatically generating during compilation a valid instruction address range 
including an upper bound and a lower bound for the range of addresses, wherein the 
source code of the computer program does not include a specification of the upper 
bound and lower bound; and 

verifying that the runtime value of the data structure is within the valid instruction 
address range. 

6. (canceled) 

7. (original) The method of claim 1 , further comprising communicating the invariant 
property from a compiler to a code generator. 

8. (original) The method of claim 7, further comprising storing the invariant property in 
a symbol table. 

9. (currently amended) The method of claim 8, wherein the invar i ant property range 
of addresses is a range of data addresses and further comprising ver i fy i ng that tho 
runt i me va l uo of tho data otructuro i o w i th i n^a ra n go of data addrooooo opoc i f i od i n 
oourco code of tho computer program . 

10. (currently amended) The method of claim 8, wherein the invar i ant proporty range 
of addresses is a range of data addresses and further comprising: 
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automatically generating during compilation a valid data address range including 
an upper bound and a lower bound for the range of data addresses, wherein the source 
code of the computer program does not include a specification of the upper bound and 
lower bound; and 

verifying that the runtime value of the data structure is within the valid data 
address range. 

1 1 . (currently amended) The method of claim 8, wherein the i nvar i ant proporty range 
of addresses is a range of instruction addresses and furthor comprioing vor i f^^ i ng that 
tho runt i mo va l ue of tho data otructuro i o with i n tho rango of inotruct i on addrooooo 
opoc i fiod i n oouroo codo of tho computor program . 

12. (currently amended) The method of claim 8, wherein the i nvar i ant proporty range 
of addresses is a range of instruction addresses and further comprising: 

automatically generating during compilation a valid instruction address range 
including an upper bound and a lower bound for the range of addresses, wherein the 
source code of the computer program does not include a specification of the upper 
bound and lower bound; and 

verifying that the runtime value of the data structure is within the valid instruction 

address range. 

13. (canceled) 

14. (original) The method of claim 8, further comprising storing in the symbol table one 
or more code addresses associated with one or more updates to the data structure. 

1 5. (currently amended) An apparatus for verifying at runtime an invariant property of 
a data structure of a computer program, comprising: 

means for automatically generating a first code segment that verifies a runtime 
value of the data structure is consistent with the invariant property in response to an 
annotation of the data structure that defines the invariant property of the data structure^ 
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wherein the invariant property is a range of addresses specified in the annotation in 
source code of the computer program : 

means for comparing the runtime value of the data structure with the invariant 
property during execution of the program via execution of the first code segmen t and for 
verifying that the runtime value of the data structure is within the range of addresses : 
and 

means for performing a programmed action if the runtime value is inconsistent 
with the invariant property. 

16. (currently amended) A computer-implemented method for verifying at runtime an 
invariant property of a data structure of a computer program, comprising: 

determining an invariant property of a data structure from a source code 
specification of the data structure and an associated specification of the invariant 
property in the source code, wherein the specification of the invariant property defines 
the invariant property without checking whether a variable used with the data structure 
is consistent with the invariant property , and the invariant property is a range of 
addresses specified in the annotation in source code of the compu ter program: 

generating from the specification of the invariant property a first executable code 
segment that determines whether a value of a variable used with the data structure is 
consistent with the invariant property; 

determining during execution of the first executable code segment whether the 
value of the variable used with the data structure is within the ra nge of addresses 
cono i otont w i th tho i nvariant property ; and 

performing a programmed action in response to the value of the variable being 
outside the range of addresses incono i otont with tho i nvar i ant property . 

17. (currently amended) The method of claim 16, wherein the i nvar i ant property 
range of addresses is a range of data addresses established during compilation of 
program code that instantiates the data structure and tho atop of determ i n i ng whether 
tho vj i uo of the varinM" in '^^n^'^*""^ inw^rinnt prnpnrt^jf inrlnHnr Hntnrmin i n n 
whether tho va l uo of the variab l e io w i thin tho range of data addrooooc . 
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1 8. (currently amended) The method of claim 16, wherein the invar i ant property 
range of addresses is a range of data addresses and further comprising: 

automatically generating during compilation a valid data address range including 
an upper bound and a lower bound for the range of data addresses, wherein the source 
code of the computer program does not include a specification of the upper bound and 
lower bound; and 

determining whether the value of the variable used with the data structure is 
within the valid data address range. 

1 9. (currently amended) The method of claim 1 6, wherein the invar i ant property 
range of addresses is a range of instruction addresses established during compilation 
of program code that instantiates the data structure and further comprising verifying that 
the value of the variable used with the data structure is within the range of instruction 
addresses specified in source code of the computer program. 

20. (currently amended) The method of claim 16, wherein the i nvar i ant property 
range of addresses is a range of instruction addresses and further comprising: 

automatically generating during compilation a valid instruction address range 
including an upper bound and a lower bound for the range of addresses, wherein the 
source code of the computer program does not include a specification of the upper 
bound and lower bound; and 

determining whether the value of the variable used with the data structure is 
within the valid instruction address range. 

21. (canceled) 

22. (previously presented) The method of claim 16, further comprising communicating 
the invariant property from a compiler to a code generator. 
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23. (previously presented) The method of claim 22, further comprising storing the 
invariant property in a symbol table. 

24. (currently amended) The method of claim 23, wherein the invar i ant property 
ranoe of addresses is a range of data addresses and tho otop of dotormin i ng whothor 

thO VJ I uO of thO Vjr i nb l O i C Cnno i -jt^nt '"ith t*"" im.nrinnt pmpnrt^y InnlnHnr- Hntnrmin l nn 

whothor tho valuo of tho vor i ab l o uood w i th tho data otructuro io w i th i n a rango of data 
3ddroc20j jpocif i od i n nni i rrr rrrl" "f th" nnmpntnr prnfjrnm 

25. (currently amended) The method of claim 23, wherein the invar i ant property 
range of addresses is a range of data addresses and further comprising: 

automatically generating during compilation a valid data address range including 
an upper bound and a lower bound for the range of data addresses, wherein the source 
code of the computer program does not include a specification of the upper bound and 
lower bound; and 

determining whether the value of the variable used with the data structure is 
within the valid data address range. 

26. (currently amended) The method of claim 23, wherein the invar i ant property 
range of addresses is a range of instruction addresses established during compilation 
of program code that instantiates the data structure and tho otop of determ i ning 
wh e th e r the va l ue of thr vnr i nhh nnnr-irtont ^Mith thn imnrinnt prnpnrty inc l udoo 
determining wh e ther thr vnlir "M^^^ wnHnhin nnnH ^.nth thn Hntn '-tnirturo Ig with i n tho 
range of in a truct i on nrlflr"''^"^ opnnifinH in omirnn nnHn nf thn rnmputor program . 

27. (currently amended) The method of claim 23, wherein the i nvar i ant property 
range of addresses is a range of instruction addresses and further comprising; 

automatically generating during compilation a valid instruction address range 
including an upper bound and a lower bound for the range of addresses, wherein the 
source code of the computer program does not include a specification of the upper 
bound and lower bound; and 
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determining whether the value of the variable used with the data structure is 
within the valid instruction address range. 

28. (canceled) 

29. (previously presented) The method of claim 23, further comprising storing in the 
symbol table one or more instruction addresses at which respective updates are made 
to the data structure. 

30. (currently amended) An apparatus stored on a computer readable medium and 
executing on a computer for verifying at runtime an invariant property of a data structure 
of a computer program, comprising: 

means for determining an invariant property of a data structure from a source 
code specification of the data structure and an associated specification of the invariant 
property in the source code, wherein the specification of the invariant property defines 
the invariant property without checking whether a variable used with the data structure 
is consistent with the invariant propertv . and the invariant orooertv is a range of 
addresses specified in the annotation in source code of the computer program : 

means for generating from the specification of the invariant property a first 
executable code segment that determines whether a value of a variable used with the 
data structure is consistent with the invariant property; 

means for determining during execution of the first executable code segment 
whether the value of the variable used with the data structure is within the range of 
addresses conoiotont w i th tho i nvar i ant property ; and 

means for performing a programmed action in response to the value of the 
variable being outside the range of addresses incono i otont w i th tho i nvar i ant property . 
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